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If <group==contractor> then <profile_1> 



lf<group==research> and <media_type==VPN> then <profile_2a> 



lf<group==research> then <profile_2b> 
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<profile_1> 

encryptionjevel = high; 
IP_address_assigned = 456.78.90.123; 
Time_of_day == 0900.1700; 
Day_of_week == Mon Tue Wed Thu Fri; 
lPJilter = 351 .67.23.99; 
called j3hone_number == 425.***.****; 
authentication_type = secure; 
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<profile_2a> 
-encryptionjevel = high; 
authentication_type = secure; 
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<profile_2b> 
encryptionjevel = low; 
callerJD ==555-1212; 



caller ID ==666-1212 



FIG. 3a 
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If <group==basic_access> then <profile_basic_access> 



lf<group==ISDN> then <profile_ISDN> 



<profile_basic_access> 
media_type == dial in; 
QoS = best effort; 
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<profile_ISDN> 

media_type == dial in AND ISDN; 
QoS = priority 1 1 ; 
multijink == 2; 
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FIG. 3b 
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Proceed to next policy 
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Step 420 
Select profile 
corresponding to the 
policy statement 
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Step 422 
Replace actions in the 
profile with override 
attribute 
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Step 424 
Transmit profile to 
NAS 



Finish 



Step 412 
NAS denies access 



Step 410 
Transmit denial to 
NAS 



Step 414 
Policy server 
evaluates policy 
statement 
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Step 400 
Create link with NAS 
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NAS evaluates link 



Step 404 
NAS notifies policy server 
program of login attempt 
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Policy server program 
attempts to retrieve user 
object 
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Step 502 
Prompt for 
characteristics of new 
user 
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Step 504 
Create user object 
based on entered 
characteristics 
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Step 506 
Prompt for override 
attributes 
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Finish 
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Start 



Step 600 
Launch setup program 



Step 602 
Present list of criteria 



Step 604 
Present list of groups 
and prompt for 
selection 




Step 610 
Prompt for entry of 
new parameters 
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Prompt for choice of 
existing profile 
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Prompt to save 
changes 
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